📝 Adding a CHANGELOG.md file

Author: ivelten

CHANGELOG.md

@@ -0,0 +1,27 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [1.0.1] - 2026-03-22
+
+- Added `apt-get upgrade` to pick up Debian security patches (glibc, gnutls28, openssh, nodejs, node-proxy-agents)
+- Replaced Debian-packaged Node.js 20 with Node.js 22 LTS from NodeSource to address vulnerable npm transitive dependencies (@babel/traverse, tar, undici, minimatch, flatted, serialize-javascript, http-cache-semantics)
+- Installed direnv from GitHub releases instead of apt to avoid Go stdlib CVEs in the Debian-packaged binary
+- `scout-report.sh` script for generating Docker Scout vulnerability reports
+- `.gitignore` file
+
+## [1.0.0] - 2026-03-22
+
+- Initial release
+- Haskell toolchain: GHC 9.10.3, Cabal 3.12.1.0, Stack, GHCup, HLS
+- Developer tools: Hoogle, Ormolu, fast-tags, cabal-gild, direnv
+- Debug Adapter Protocol support via haskell-dap, ghci-dap, haskell-debug-adapter
+- Claude Code CLI
+- Multi-platform support (linux/amd64, linux/arm64)
+- GitHub Actions CI/CD with semver tagging
+
+[1.0.1]: https://github.com/ivelten/haskell-devcontainer/compare/v1.0.0...v1.0.1
+[1.0.0]: https://github.com/ivelten/haskell-devcontainer/releases/tag/v1.0.0